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CLAIMS 

1. Method of generating electronic keys d for a 
public-key cryptography method using an electronic 

5 device, mainly characterized in that it comprises two 
separate calculation steps: 
Step A 

1) calculating pairs of prime numbers (p,q) or 
values representative of pairs of prime 

10 numbers, this calculation being independent 

of knowledge of the pair (e,l) in which e is 
the public exponent and 1 is the length of 
the key of the cryptography method, 1 also 
being the length of the modulus N of said 

15 method, 

2) storing the pairs or values thus 

obtained; 

Step B 

calculating a key d from the results of step 
20 A and knowledge of the pair (e,l). 

2. Method of generating electronic keys 
according to Claim 1, characterized in that step A-l) 
consists in calculating pairs of prime numbers (P/q) 

25 without knowledge of the public exponent e or of the 
length 1 of the key, using a parameter n which is the 
product of small prime numbers, so that each pair (p,q) 
has a maximum probability of being able to correspond 
to a future pair (e,l) and can make it possible to 

30 calculate a key d. 



3. Method of generating electronic keys 
according to Claim 2, characterized in that the 
calculation of step A-l) also takes account of the fact 
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that e has a high probability of forming part of the 
set {3, 17, .../ 2 16+1 }, and for this use is made in the 
calculation of a seed a which makes it possible to 
calculate not pairs (p, q) but a representative value 
5 referred to as the image of the pairs (p,q). 

4. Method of generating electronic keys 
according to Claims 1 and 3, characterized in that the 
storage A-2) consists in storing the image of the 

10 pairs. 

5. Method of generating electronic keys 
according to Claim 1, characterized in that step A-l) 
consists in calculating pairs of prime numbers (p, q) 

15 for different probable pairs (e,l). 

6. Method of generating electronic keys 
according to Claims 2 and 5, characterized in that the 
parameter FI contains the usual values of the public 

20 exponent e, for example 3, 17. 

7. Method of generating electronic keys 
according to Claim 1, characterized in that step A-l) 
comprises an operation of compressing the calculated 

25 pairs (p,q) and step A-2) then consists in storing the 
compressed values thus obtained. 

8. Method of generating electronic keys 
according to Claim 1, characterized in that step A-l) 

30 comprises the generation of a prime number q for which 
a lower limit B 0 is set for the length C 0 of this prime 
number that is to be generated, such that ? 0 ^ B 0 , for 
example B 0 = 256 bits, and in that it comprises the 
following sub-steps : 
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1) calculating parameters v and w from the 
following relations and storing them: 

v = V2 2/oM /n 
w = 2 e ° /n 

5 in which n is stored and corresponds to the 

product of the f smallest prime numbers, f being 
selected such that EI < 2 B ° , 

2) selecting a number j within the range of 
integers {v, . w-1} and calculating 0=j II; 

10 3) selecting and storing a prime number k of 

short length compared to the length of an RSA key 
within the range of integers {0, 11-1}, (k, FI) 

being co-prime; 

4) calculating q=k+4, 

15 5) verifying that q is a prime number, if q 

is not a prime number then: 

a) taking a new value for k using the 
following relation : 

k = a k (mod Yl) ; a belonging to the 
20 multiplicative group Z* n of integers modulo II; 

b) repeating the method from step 4) . 

9. Method of generating electronic keys 
according to Claims 3 and 8, characterized in that the 

25 numbers j and k can be generated from the seed a stored 
in memory* 

10. Method of generating electronic keys 
according to Claim 8, characterized in that the prime 

30 number p is generated by repeating all the above sub- 
steps while replacing q with p and replacing t 0 with f- 
?o. 
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11. Method of generating electronic keys 
according to any one of the preceding claims, 
characterized in that: 

step B comprises, for a pair (p,q) obtained 

5 in step A: 

- verifying the following conditions: 

(i) p-1 and q-1 are prime numbers with a given 

e and 

(ii) N=p*q is an integer of given length V, 

10 - if the pair (p,q) does not satisfy these 

conditions : 

- selecting another pair and repeating the 
verification until a pair is suitable, 

- calculating the key d from the pair (p,q) 

15 obtained. 

12. Secure portable object able to generate 
electronic keys d of an RSA-type cryptography 
algorithm, characterized in that it comprises at least: 

20 - communication means for receiving at least 

one pair (e, 1) , 

- a memory for storing the results of a step 
A consisting in: 

calculating pairs of prime numbers (p,q) 
25 or values representative of pairs of prime 

numbers, this calculation being independent of 
knowledge of the pair (e,l) in which e is the 
public exponent and 1 is the length of the key 
of the cryptography method, 1 also being the 
30 length of the modulus N of this p, 

- a program for implementing a step B 
consisting in: 

calculating a key d from the results of 
step A and knowledge of a pair (e,l). 
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13. Secure portable object according to Claim 12, 
characterized in that it also comprises a program for 
implementing step A, steps A and B being separate in 

5 terms of time. 

14. Secure portable object according to Claim 13, 
characterized in that the program for implementing step 
A carries out the following sub-steps: 

10 1) calculating parameters v and w from the 

following relations and storing them: 

v = V2 2 ' o_1 /n 
w = 2'°/n 

in which n is stored and corresponds to the 
15 product of the f smallest prime numbers, f being 
selected such that II < 2 B ° , Bo is a lower limit set for 
the length C 0 of the prime number that is to be 
generated, such that £ 0 ^ B 0 , for example B 0 = 256 bits 

2) selecting a number j within the range of 
20 integers {v, w-1} and calculating Q=j II; 

3) selecting and storing a prime number k of 
short length compared to the length of an RSA key 
within the range of integers {0, 11-1}, (k, Et) 
being co-prime; 

25 4) calculating q=k+£, 

5) verifying that q is a prime number, if q 
is not a prime number then: 

a) taking a new value for k using the 
following relation: 

30 k = a k (mod II) ; a belonging to the 

multiplicative group Z*n of integers modulo II; 

b) repeating the method from step 4). 
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15. Secure portable object according to Claim 
or 13 or 14, characterized in that it consists of 
chip card. 



